kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 2 Releases Activity

hetzner-dyndns: add rudimentary dyndns #76

Open
sophie wants to merge 3 commits from hetzner-dyndns into main
pull from: hetzner-dyndns
merge into: kunsi:main
Conversation 0 Commits 3 Files changed 3 +42 -3
1 changed files with 42 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 380eb02a6d - Show all commits

45
nodes/sophie/vmhost.py
View file

@ -2,13 +2,14 @@ nodes['sophie.vmhost'] = {
'hostname': '172.19.164.2', 'hostname': '172.19.164.2',
'bundles': { 'bundles': {
'backup-client', 'backup-client',
'hetzner-dyndns',
'lm-sensors', 'lm-sensors',
'nfs-server',
'mosquitto', 'mosquitto',
'nfs-server',
'smartd', 'smartd',
'vmhost', 'vmhost',
'wireguard',
'zfs', 'zfs',
'hetzner-dyndns'
}, },
'groups': { 'groups': {
'debian-bookworm', 'debian-bookworm',
@ -24,7 +25,7 @@ nodes['sophie.vmhost'] = {
}, },
'hetzner-dyndns': { 'hetzner-dyndns': {
'zone': 'sophies-kitchen.eu', 'zone': 'sophies-kitchen.eu',
'record': 'home.router', 'record': 'router.home',
'api_key': vault.decrypt('encrypt$gAAAAABoABHrRTTyOAAFIsHK_g-bubDoNJidbAQ6_0VXyqfal8-wpVMuPPlrw-OtbI1AjNU6Rd1_gKTvwYtNYO9X6RuvuW3TCCH_eitpsoylVEQ0X6SDFNQAFfjkRlOgEiFl85oyTazl'), 'api_key': vault.decrypt('encrypt$gAAAAABoABHrRTTyOAAFIsHK_g-bubDoNJidbAQ6_0VXyqfal8-wpVMuPPlrw-OtbI1AjNU6Rd1_gKTvwYtNYO9X6RuvuW3TCCH_eitpsoylVEQ0X6SDFNQAFfjkRlOgEiFl85oyTazl'),
}, },
'interfaces': { 'interfaces': {
@ -72,6 +73,21 @@ nodes['sophie.vmhost'] = {
}, },
}, },
}, },
'nftables': {
'forward': {
'50-router': [
'ct state { related, established } accept',
'oifname br1 accept',
],
},
'input': {
'50-wireguard': [
'udp dport 1194 accept',
'udp dport 10348 accept',
'udp dport 10349 accept',
],
},
},
'smartd': { 'smartd': {
'disks': { 'disks': {
'/dev/nvme0', '/dev/nvme0',
@ -115,6 +131,29 @@ nodes['sophie.vmhost'] = {
}, },
}, },
}, },
'wireguard': {
'snat_ip': '172.19.137.2',
'peers': {
'thinkpad': {
'endpoint': None,
'exclude_from_monitoring': True,
'my_ip': '172.19.165.64',
'my_port': 10348,
'their_ip': '172.19.165.65',
'psk': vault.decrypt('encrypt$gAAAAABoAUy3lAHfn7d9Jn4ppiPRr6LOReFGyGS4HzWC5ACHNipDFnGttnOHNji2DGIYVITzj3PosZs7PRn8BvXmwumEXNNP-G0nDucuiNNzUKuOCP4YWaF9-I1tnpmT_td3nqsCDajH'),
'pubkey': vault.decrypt('encrypt$gAAAAABoAUxlf048ovJebqo0MlLiLHcuuTCSmnCzhxSZPrFMjRaFLW0CvC3GnVed_4n7CjjZ6ygrORSl8xyBM5hvbN0-JM_56ZZFpn1UVkizctjHjb1u2XtpGAe2nMAnq2Cdg5swgH9S'),
},
'smartphone': {
'endpoint': None,
'exclude_from_monitoring': True,
'my_ip': '172.19.165.66',
'my_port': 10349,
'their_ip': '172.19.165.67',
'psk': vault.decrypt('encrypt$gAAAAABoAUy3lAHfn7d9Jn4ppiPRr6LOReFGyGS4HzWC5ACHNipDFnGttnOHNji2DGIYVITzj3PosZs7PRn8BvXmwumEXNNP-G0nDucuiNNzUKuOCP4YWaF9-I1tnpmT_td3nqsCDajH'),
'pubkey': vault.decrypt('encrypt$gAAAAABoAUxlf048ovJebqo0MlLiLHcuuTCSmnCzhxSZPrFMjRaFLW0CvC3GnVed_4n7CjjZ6ygrORSl8xyBM5hvbN0-JM_56ZZFpn1UVkizctjHjb1u2XtpGAe2nMAnq2Cdg5swgH9S'),
},
},
},
'zfs': { 'zfs': {
'pools': { 'pools': {
'storage': { 'storage': {